gh-683: secure_random: add "atomic" dep (for openssl)

SConstruct

@@ -661,6 +661,10 @@ if meta.platform == 'darwin':
     conf.FindTool('LIPO', [''], [('lipo', None)], required=False)
     conf.FindTool('INSTALL_NAME_TOOL', [''], [('install_name_tool', None)], required=False)
 
+if meta.compiler == 'gcc' or meta.compiler == 'clang':
+    if conf.CheckLib('atomic'):
+        env.AddManualDependency(libs=['atomic']) # explicitly needed by libcrypto (openssl)
+
 meta.c11_support = False
 if not GetOption('disable_c11'):
     if meta.compiler == 'gcc':

scripts/ci_checks/docker.sh

@@ -1,15 +1,27 @@
 #!/usr/bin/env bash
-set -euxo pipefail
+#
+# This script can be run locally by user 'bob' like this:
+#
+#   DOCKER_UID="$(id -u bob)" DOCKER_GID="$(id -g bob)" ./scripts/ci_checks/docker.sh ...
+#
+# (the full command line with exact arguments to docker.sh can be taken from CI)
+
+set -eux -o pipefail
 
 if [ -z "${CI:-}" ]; then
     opts=-ti
 else
     opts=-t
 fi
 
+user="${DOCKER_UID:-"$UID"}"
+if [ -n "${DOCKER_GID:-}" ]; then
+    user="$user:$DOCKER_GID"
+fi
+
 docker run --rm ${opts} \
        --cap-add SYS_PTRACE \
-       -u "${UID}" \
+       -u "$user" \
        -v "$(pwd)":/opt/roc \
        -w /opt/roc \
        -e CI="${CI:-}" \